Privacy policy

Last updated 28 August 2026

Orderstone Limited, trading as Liyasa, is the data controller for personal data collected through liyasa.co.uk. This policy explains what we collect, why, and what you can do about it.

Who we are

Liyasa is a trading name of Orderstone Limited, a company registered in Scotland, company number SC879065, registered office International House, 38 Thistle Street, Edinburgh, EH2 1EN.

We are registered with the Information Commissioner's Office under registration number ZC186970. For any question about your data, contact us at hello@liyasa.co.uk.

What we collect

• Account details. Your email address, username and any profile information you add.
• Listings and messages. The photos, descriptions and correspondence you create on the platform.
• Order and delivery details. What you bought or sold, and the delivery address needed to produce a shipping label.
• Payment details. Handled by Stripe. We never see or store your full card number.
• Technical data. Basic log and device information needed to keep the service secure and working.

Why we use it

• To run your account and show your listings (performance of a contract).
• To process payments, payouts and refunds (performance of a contract).
• To arrange and track delivery (performance of a contract).
• To prevent fraud, resolve disputes and keep the marketplace safe (legitimate interests).
• To send marketing email, only where you have opted in (consent, which you can withdraw at any time).

Who we share it with

We share only what each provider needs: Supabase (database, auth and image hosting), Stripe (payments and seller payouts), InPost and Sendcloud (delivery and shipping protection), and Vercel (hosting). When you buy or sell, the delivery address needed to produce a shipping label is shared with our courier partner. We do not sell your data.

How long we keep it

Account data is kept whilst your account is open. Order and transaction records are kept for six years after the sale to meet UK tax and accounting requirements. Listings you delete are removed from the marketplace immediately.

Your rights

Under UK GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or port it elsewhere. You can also withdraw consent for marketing at any time. Email hello@liyasa.co.uk and we will respond within one month. If you are unhappy with our response you can complain to the Information Commissioner's Office at ico.org.uk.

Cookies

We use strictly necessary cookies to keep you signed in and to keep checkout secure. These do not require consent. We do not use advertising cookies.